And let's not forget their shenanigans from before, like sending certain sites (google) to an their own internal forwarder. Who's to say they weren't capturing your searches, leave alone very obviously breaking SSL.